Skip to content

CVE-2004-0790 Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE...

MediumCVSS 5.0 EPSS 80.1% PoC
Published
Updated
Exploit status
Proof-of-concept only

Description

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

Affected products

ProductAffected versionsFixed in
Microsoft windows 2000 All versions No fix listed
Microsoft windows 2003 server = r2 No fix listed
Microsoft windows 98 All versions No fix listed
Microsoft windows 98se All versions No fix listed
Microsoft windows me All versions No fix listed
Microsoft windows xp All versions No fix listed
sun solaris = 9.0 No fix listed
sun solaris = 10.0 No fix listed
sunos = 5.7 No fix listed
sunos = 5.8 No fix listed

References